MISP
/
misp-website
mirror of https://github.com/MISP/misp-website
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [release 2.4.151] updated

pull/54/head
Alexandre Dulaunoy 2021-11-23 12:13:47 +01:00
parent a24aed1860
commit 0f4ebb6874
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 36 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
_posts/2021-11-23-MISP.2.4.151.released.md
View File

@ -1,7 +1,7 @@
--- ---
title: MISP 2.4.151 released (Black friday threat intel rush release) title: MISP 2.4.151 released (Black friday threat intel rush release)
layout: post layout: post
featured: /assets/images/misp/blog/misp-openapi.png featured: /assets/images/misp/blog/graph-syria.png
--- ---
# MISP 2.4.151 released # MISP 2.4.151 released
@ -16,10 +16,10 @@ MISP 2.4.151 released including a host of bug fixes and a bunch of new features
# New background processor # New background processor
- MISP has been using CakeResque for its background jobs for the better part of a decade. Whilst it has served us well, the library has been stale for a long time and carries a (for us) unnecesary complexity and is generally the most difficult part of the application to debug - MISP has been using CakeResque for its background jobs for the better part of a decade. Whilst it has served us well, the library has been stale for a long time and carries a (for us) unnecessary complexity and is generally the most difficult part of the application to debug
- Luciano "@righel" Righetti has implemented a completely new, compatible background processing engine using Supervisord - Luciano "@righel" Righetti has implemented a completely new, compatible background processing engine using Supervisord
- Queue and execute jobs the same way as you are used to from before, monitor worker progress via the tools provided by supervisord in addition to MISP - Queue and execute jobs the same way as you are used to from before, monitor worker progress via the tools provided by supervisord in addition to MISP
- No scheduling capabilities, these were an unnecesary overhead for us before as we relied on corn jobs as our prefered scheduling mechanism anyway - No scheduling capabilities, these were an unnecessary overhead for us before as we relied on corn jobs as our preferred scheduling mechanism anyway
- Expect more improvements to this library over the course of the next months, but feel free to switch to using it already now - Expect more improvements to this library over the course of the next months, but feel free to switch to using it already now
- Currently it is completely optional and the old background processor will still be supported for a while - Currently it is completely optional and the old background processor will still be supported for a while
- Be aware that manual setup steps are required to get the new processor working, refer to [the upgrade guide](https://gist.github.com/righel/8ebc6c84341f2aea7d0bfa124e535ef8) on the procedure, if you decide to start using it already now - Be aware that manual setup steps are required to get the new processor working, refer to [the upgrade guide](https://gist.github.com/righel/8ebc6c84341f2aea7d0bfa124e535ef8) on the procedure, if you decide to start using it already now
@ -39,6 +39,39 @@ MISP 2.4.151 released including a host of bug fixes and a bunch of new features
- The previous version introduced a new STIX library as a replacement for the old one. This change did end up causing some update issues for some installations, the built in updater is now aware of this change and should allow you to easily update via the UI/API updater, with the new STIX library working as intended - The previous version introduced a new STIX library as a replacement for the old one. This change did end up causing some update issues for some installations, the built in updater is now aware of this change and should allow you to easily update via the UI/API updater, with the new STIX library working as intended
- A long list of improvements, thanks to all contributors! For a detailed list of changes, head over to the [changelog](https://www.misp-project.org/Changelog.txt) - A long list of improvements, thanks to all contributors! For a detailed list of changes, head over to the [changelog](https://www.misp-project.org/Changelog.txt)
# MISP Modules
- New [Passive SSH expansion](https://github.com/D4-project/passive-ssh) expansion module.
- Updated [Recorded Future](https://misp.github.io/misp-modules/expansion/#recordedfuture) expansion module included links and related data.
- New [CIRCL hashlookup expansion](https://circl.lu/services/hashlookup/) module added.
The [MISP modules changelog is available](https://www.misp-project.org/Changelog-misp-modules.txt).
# MISP Taxonomies
- Updated taxonomies for [Interactive Cyber Training setup and environment](https://www.misp-project.org/taxonomies.html#_interactive_cyber_training_audience).
- Updated [fr-classification](https://www.misp-project.org/taxonomies.html#_fr_classif) to match IGI1300.
[MISP Taxonomies changelog](https://www.misp-project.org/Changelog-misp-taxonomies.txt) is available.
# MISP Galaxy
- Updated to MITRE ATT&CK version 10.
- Multiple updates in malpedia, threat actor galaxy and Office 365 techniques.
[MISP Galaxy changelog](https://www.misp-project.org/Changelog-misp-galaxy.txt)
# MISP Objects
- New JA3 server object added.
- New Security playbook object added.
- New submarine object added
- New Passive SSH object added.
- Updated device object.
- New hashlookup object added.
- New edr-report object added.
[MISP objects changelog](https://www.misp-project.org/Changelog-misp-objects.txt)
# Acknowledgement # Acknowledgement